Privacy Policy

Last Updated: 9 August 2026

Face Pro is a face-recognition attendance application published by KokSamLai Solutions Private Limited. This Privacy Policy explains what information the Face Pro mobile app and website collect, how that information is used and shared, and the choices available to you.

In short: Face Pro records people's faces in order to mark attendance. On the Basic plan, face data never leaves the phone. On the Pro and Enterprise plans, a mathematical representation of each registered face is sent to a server so that staff records can be shared between devices. Face data is never sold, never used for advertising, and never used to train anyone's models.

1. Who this policy applies to

Face Pro is normally installed by an organisation — an employer, school or institution — which then registers the faces of its own staff, students or members. In that arrangement:

The organisation decides whose faces are registered and why. It is responsible for obtaining consent from those people before registering them.
KokSamLai Solutions Private Limited provides the app and, on the Pro plan, the servers that store synchronised records.

If your face has been registered in Face Pro by your employer or institution and you wish to have it removed, contact that organisation first, as they control the account. You may also contact us using the details in section 13.

2. Face and biometric data

This is the most sensitive information Face Pro handles, so we describe it in full.

2.1 What is captured

When a person is registered in the app, the device camera captures several photographs of their face. From each photograph the app computes a face embedding — a list of 512 numbers that mathematically describes the geometry of that face. Both of the following are created:

the captured facial photographs;
the face embeddings derived from them.

At attendance time the camera computes a fresh embedding from the live view and compares it against the registered embeddings to identify the person. Camera frames used for this comparison are processed in memory and are not saved.

A face embedding is not a reversible copy of a photograph, but it is biometric information that identifies a specific individual, and we treat it as such.

2.2 Where face data is stored

Face photographs and face embeddings are stored in the app's private storage on the device itself. This storage is not readable by other apps. Face Pro also disables Android's automatic cloud backup, so face photographs and embeddings are not copied to Google Drive or any other backup service.

2.3 What leaves the device, by plan

Whether face data is transmitted depends on the subscription plan the organisation uses:

Plan	Face photographs	Face embeddings	Attendance records
Basic	Stay on the device	Stay on the device	Stay on the device
Pro	Stay on the device	Sent to Face Pro servers so registered people can be recognised on the organisation's other devices	Sent to Face Pro servers
Enterprise	Stay on the device	Sent to a server operated by the organisation itself, at an address the organisation configures	Sent to the organisation's own server

The captured facial photographs are never transmitted off the device on any plan. On Enterprise, data is sent to infrastructure chosen and controlled by the organisation, and its handling there is governed by that organisation's own policies.

2.4 What we do not do with face data

We do not sell face data or any other personal data.
We do not use face data for advertising or marketing.
We do not use face data to train machine-learning models.
We do not share face data with data brokers or advertising networks.
We do not use face data to identify anyone outside the organisation that registered them.

2.5 Consent

Face registration in Face Pro is a deliberate action performed by an administrator with the person present. The organisation operating the app must obtain the individual's informed consent — and, where the individual is a minor, the consent of a parent or guardian — before registering their face.

3. Other information we collect

3.1 Account information

Name of the account holder
Email address
Mobile number, including country code
Password, which is stored only in an irreversible hashed form
One-time passcodes used to verify a phone number or a new device

3.2 Staff and attendance information

The name and staff or employee identifier entered for each registered person
The date and time each attendance record is marked
An optional nickname given to a device, such as a location or gate name

3.3 Device information

An Android device identifier, used to tie a subscription to a specific device, to enforce the number of registered devices, and to detect misuse
Device make and model
The date and time the device last contacted our servers

3.4 Payment information

Subscription payments are processed by Razorpay. Face Pro does not receive or store card numbers, UPI credentials or bank details. We send the account holder's email address and mobile number to Razorpay so that the payment can be attributed and receipts delivered, and we store the resulting order and payment identifiers, amounts and payment status.

3.5 Diagnostic information

The app keeps a local record of recognition attempts on the device to help an administrator tune accuracy. This may include the names of the closest matching registered people and the numerical match scores. These records stay on the device unless an administrator deliberately exports them, and they are removed when app data is cleared or the app is uninstalled.

4. How the information is used

To recognise registered people and record their attendance
To let an organisation view and export its own attendance records
To synchronise registered people and attendance across an organisation's devices, on the Pro and Enterprise plans
To create and secure accounts, including verification by one-time passcode
To manage subscriptions, billing, renewals and plan limits
To detect and prevent misuse, such as use of one subscription on more devices than it permits
To diagnose faults and improve recognition accuracy
To comply with legal obligations

We do not use personal data for automated decision-making that produces legal effects, beyond the attendance matching the app exists to perform.

5. Third-party services

Face Pro relies on the following third parties:

Razorpay — payment processing. Receives the account holder's email address and mobile number.
2Factor — delivery of one-time passcodes by SMS. Receives the mobile number being verified.
Hosting and infrastructure providers — operate the servers on which Pro-plan data is stored.
The organisation's own server — on the Enterprise plan only, and at an address configured by that organisation.

Face recognition itself runs entirely on the device. Face images are not sent to any third-party recognition service.

6. Data retention

Face photographs and embeddings are kept on the device until the registered person is deleted from the app, the app's data is cleared, or the app is uninstalled.
On the Pro plan, synchronised embeddings and attendance records are kept for as long as the account is active, and are deleted when the account is deleted.
On the Enterprise plan, retention on the organisation's own server is determined by that organisation.
Billing records are retained for as long as required by tax and accounting law.

7. Deleting your data

There are three ways to remove data:

Remove one registered person. An administrator can delete a person from the staff list in the app. This removes that person's face photographs and embeddings from the device.
Remove all data from a device. Uninstalling Face Pro, or clearing its data in Android Settings, deletes all face photographs, embeddings and locally held attendance records on that device.
Delete the whole account. Submit a request through the account deletion page. This removes the account profile, credentials, attendance records and any face data associated with the account from our servers. Requests are processed within 30 days.

Deleting the account removes data held on our servers. Any copies still held on a device are removed by uninstalling the app or clearing its data on that device.

8. Data security

Face photographs and embeddings are held in app-private storage that other applications cannot read.
Automatic cloud backup of the app's data is disabled, so biometric data is not copied off the device by the operating system.
Data transmitted between the app and our servers is sent over encrypted HTTPS connections.
Passwords are stored only as irreversible hashes.

No system can be guaranteed completely secure, and we cannot warrant absolute security of information transmitted over the internet.

9. Children and institutional use

Face Pro may be deployed in schools and other institutions where some registered individuals are under 18. Face Pro is not directed to children as consumers and is not offered for personal use by children.

Where an institution registers a minor, that institution is responsible for obtaining verifiable consent from a parent or guardian before any facial image or face embedding is captured, and for informing them of this policy.

10. Your rights

Depending on where you live, you may have the right to:

Access the personal data held about you
Correct inaccurate information
Request deletion of your data
Withdraw consent to the processing of your biometric data
Restrict or object to processing
Receive a copy of your data in a portable format

If your data was entered by an employer or institution, please contact them first, as they control the account. You may also write to us using the details in section 13 and we will assist.

11. International data transfers

Our servers are located in India. If you use Face Pro from another country, information will be transferred to and processed in India. Where required, we apply appropriate safeguards to protect data in transit and at rest.

12. Updates to this policy

We may update this Privacy Policy to reflect changes to the app, our practices, or legal requirements. The revised policy will be published on this page with a new "Last Updated" date. Where a change materially affects how biometric data is handled, we will seek fresh consent where the law requires it.

13. Contact us

For questions about this policy, to exercise any of the rights above, or to raise a privacy concern:

Email: privacy@koksamlai.in
KokSamLai Solutions Private Limited, Manipur, India
Account deletion: Account deletion request